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(54) Postage metering system and method on a network 



(57) A postage metering system (1 0) includes a plu- 
rality of computers (20) operatively connected as part of 
a computer network and operating as client computers 
(20) on tine computer network. At least one postal secu- 
rity device (40) (PSD) is coupled to at least one of the 
client computers (20) (local client computer). The PSD 
(40) includes unique identification the ability to store 
postal value and generate digital signatures. The client 
computers (20) function as a postage metering network 
wherein a client computer other than the local client 
computer (remote client computer) requests evidence 



of postage payment from the PSD (40) for concluding a 
postage metering transaction. The local client computer 
functions as a meter server and the remote client com- 
puter functions as a meter client on the postage meter- 
ing network. The remote client computer (20) initiates a 
postage metering transaction in the PSD (40) by send- 
ing a request for evidence of postage payment to the 
local client computer (20). The local client computer (20) 
sends the request for the evidence of postage payment 
to the PSD (40), receives transaction information from 
the PSD and sends the evidence of payment to the re- 
mote client computer for subsequent printing. 
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Description 

[0001] The present invention relates generally to a 
postage metering system and method for printing post- 
age indicia using a personal computer and, more par- 
ticularly, to a postage metering system and method for 
printing postage indicia in a network of personal com- 
puters. 

[0002] The present application is related to the follow- 
ing European Patent Application Nos. (Client Ref: E- 
645. E-646, E-647, E-648, E-649 and E-696), (Attorney 
Ref.; 76 349; 76 355; 76 395; 76 396; 76 356 and 76 
398) all filed concurrently herewith and assigned to the 
assignee of the present invention. 
[0003] The Information -Based Indicia Program 
("IBIP") is a distributed trusted system proposed by the 
United States Postal Service ("USPS") to retrofit and 
augment existing postage meters using new technology 
known as information-based indicia. The program relies 
on digital signature techniques to produce for each en- 
velope an indicium whose origin cannot be repudiated 
and content cannot be modified. I Bl P is expected to sup- 
port new methods of applying postage in addition to the 
current approach, which typically relies on a postage 
meter to mechanically print indicia on mailpieces. IBIP 
requires printing a large, high density, two-dimensional 
("2-D") bar code on a mailpiece. The 2-D bar code en- 
codes Information and is signed with a digital signature. 
[0004] The USPS has published draft specifications 
for IBIP The INFORMATION BASED INDICIA PRO- 
GRAM (IBIP) INDICIUM SPECIFICATION, dated June 
13, 1996, and revised July 23, 1997, ("IBIP Indicium 
Specification") defines the proposed requirements for a 
new indicium that will be applied to mail being processed 
using IBIP The INFORMATION BASED INDICIA PRO- 
GRAM POSTAL SECURITY DEVICE SPECIFICATION, 
dated June 13, 1996, and revised July 23. 1997, ("IBIP 
PSD Specification") defines the proposed requirements 
for a Postal Security Device ("PSD") that will provide se- 
curity services to support the creation of a new "infor- 
mation based" postage postmark or indicium that will be 
applied to mail being processed using IBIP The INFOR- 
MATION BASED INDICIA PROGRAM HOST SYSTEM 
SPECIFICATION, dated October 9, 1996, defines the 
proposed requirements for a host system element of 
IBIP ("IBIP Host Specification"). The specifications are 
collectively referred to herein as the "IBIP Specifica- 
tions". IBIP includes interfacing user (user), postal and 
vendor infrastructures which are the system elements 
of the program. The INFORMATION BASED INDICIA 
PROGRAM KEY MANAGEMENT PLAN SPECIFICA- 
TION, dated April 25, 1 997, defines the generation, dis- 
tribution, use and replacement of the cryptographic keys 
used by the USPS product/service provider and PSDs 
("IBIP KMS Specification"). 

[0005] The user infrastructure, which resides at the 
user's site, comprises a PSD coupled to a host system 
("Host") with printer. The PSD is a secure processor- 



based accounting device that dispenses and accounts 
for postal value stored therein. 
[0006] The IBIP Indicium Specification provides re- 
quirements for the indicium that consists of both human- 

5 readable data and PDF41 7 bar code data. The human- 
readable information includes an originating address, 
including the 5-digit ZIP Code of the licensing post of- 
fice, PSD ID/Type number, date of mailing and amount 
of the applied postage. The bar code region of the ind- 

10 icium elements includes postage amount, PSD ID, user 
ID, date of mailing, originating address, destination de- 
livery point identification, ascending and descending 
registers and a digital signature. 
[0007] An integrated mailing system is subject to open 

15 system requirements if it includes a computer interfaced 
to the meter and it prepares mailpiece fronts or labels 
that include both the destination address and the indici- 
um. The integrated system is an open system even if 
different printers apply the address and the indicium. If 

20 the mailing system satisfies such criteria, the USPS con- 
siders the "meter" to be an open system peripheral de- 
vice that performs the dual functions of printing the in- 
dicia and interfacing the PSD to the Host. The integrated 
mailing system must be approved by the USPS accord- 

25 ing to open system criteria. 

[0008] The IBIP Host Specification sets forth the re- 
quirements for a Host in an open system. The Host pro- 
duces the mailpiece front including the return address 
(optional), the delivery address (required), the Facing 

30 Identification Mark ("FIM"), and the indicium as an inte- 
gral unit. The Host may print this unit on the actual mail- 
piece stock or label(s) for later attachment to the mail- 
piece. The Host provides the user with an option to omit 
the FIM (e.g., when the FIM is preprinted on envelopes). 

35 The Host produces standardized addresses, including 
standard POST NET delivery point bar code, for use on 
the mailpiece. The Host verifies each address at the 
time of mailpiece creation. The Host then creates the 
indicium and transmits it to the printer. 

40 [0009] The IBIP Specifications define a stand-alone 
open metering system, referred to herein as a PC Meter 
or Stand-alone PC Meter. The Stand-alone PC meter 
has one personal computer ("PC") which operates as 
the Host ("Host PC"). The Host PC runs the metering 

^5 application software and associated libraries (collective- 
ly referred to herein as "Host Applications" and "PC Me- 
ter Toolkit") and communicates with one or more at- 
tached PSDs. The Stand-alone PC Meter can only ac- 
cess PSDs coupled to the Host PC. There is no remote 

50 PSD access for the Stand-alone PC Meter. 

[0010] The Stand-alone PC Meter processes transac- 
tions for dispensing postage, registration, and refill on 
the Host PC. Processing is performed locally between 
the Host and the PSD coupled thereto. Connections to 

55 a Data Center, for example for registration and refill 
transactions, are made locally from the Host through a 
local or network modem/internet connection. Account- 
ing for debits and credits to the PSD are also performed 
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locally, logging the transactions on the Host PC, which 
is the PC where the transactions are processed on and 
to which the PSD is attached. Thus, the accounting of 
funds and transaction processing are centralized on a 
single PC. The Host PC may accomnriodate more than 
one PSD, for example supporting one PSD per serial 
port. Several application programs running on the Host 
PC, such as a word processor or an envelope designer, 
may access the Host metering software. 
[001 1] The IBIP Specifications do not address an IBIP 
open metering system on a network environment. How- 
ever, the specifications do not prohibit such a network- 
based system. Generally, in a network environment a 
network Server PC controls remote printing requested 
by a Client PC on the network. Of course, the Client PC 
controls any local printing. 

[001 2] One version of a network metering system, re- 
ferred to herein as a "Virtual Meter", has many Host PCs 
without any PSDs coupled thereto. The Host PCs run 
client applications, but all PSD functions are performed 
on Server PCs located at a Data Center. The Host PCs 
must connect with the Data Center to process transac- 
tions such as postage dispensing, meter registration, or 
meter refills. Transactions are requested by the Host PC 
and sent to the Data Center for remote processing. The 
transactions are processed centrally at the Data Center 
and the results are returned to the Host PC. Accounting 
for funds and transaction processing are centralized at 
the Data Center. See, for example, U.S. Patent No. 
5,454,038, which is assigned to the assignee of the 
present invention. The Virtual Meter does not conform 
to all the current requirements of the IBIP Specifications. 
In particular, the IBIP Specifications do not permit PSD 
functions to be performed at the Data Center. 
[0013] it has been found that an open metering sys- 
tem, which conforms to the IBIP Specifications, can be 
implemented on a conventional local area, or wide area, 
network to form a "Network PC Metering System". The 
Network PC Metering System includes a plurality of Cli- 
ent PCs operatively coupled to a Network Server PC as 
part of a conventional network. The Network PC Meter- 
ing System is configured with at least one PSD coupled 
to at least one of the Client PCs, whereby authorized 
ones of the other Client PCs on the network can obtain 
postage value from a PSD that is remote from the re- 
questing Client PC. Any Client PC may have one or 
more PSDs attached thereto. Each Client PC has ac- 
cess, if authorized, to both its own local PSD(s), if any, 
and any other Client PC's PSD(s) ("remote PSDs") in 
the network. 

[0014] Each Client PC runs its own client metering ap- 
plication to dispense postage and to perform registration 
and refill operations. For each PSD In the Network PC 
Metering System, the Client PC to which the PSD is cou- 
pled controls processing transactions for dispensing 
postage and registration and refill of the PSD. When per- 
forming such operations, the Client PC functions as a 
server for the metering transaction, and is referred to 



herein as a "Meter Server PC". In a preferred embodi- 
ment of the Network PC Metering System the account- 
ing for debits and credits to the PSD and the logging of 
transactions are performed on the Meter Server PC. 

5 Thus, the transaction processing is performed remotely 
when a Client PC is accessing a remote PSD. In alter- 
nate embodiments, the logging of transactions is per- 
formed on a network server to which the Client PCs are 
connected ("Network Sen/er PC"), 

10 [0015] In the preferred embodiment, modems or in- 
ternet connections for accessing the Data Center are 
located in the Meter Server PC. In alternate embodi- 
ments, the modem may be located in the PSD or the 
Client PC and the Internet connection may be in the CW- 

15 ent PC. 

[001 6] It has also been found that the Network PC Me- 
tering System can be configured such that each Client 
PC dynamically knows which remote PSDs are availa- 
ble for use by such Client PC, and that each Meter Serv- 
20 er PC, i.e., each Client PC with a PSD coupled thereto, 
dynamically knows which Client PCs are on-line that are 
authorized to use the PSD coupled to the Meter Server 
PC. 

[0017] There are several benefits that are realized 

25 from the present invention. One such benefit relates to 
the postal regulations requiring that the postage printed 
on a metered mailpiece must be obtained from a meter 
licensed from the local post office at which the mailpiece 
is deposited for mailing, commonly referred to as "origin 

30 of deposit" or "domain". With a plurality of PSDs acces- 
sible over a computer network, a user at a Client PC is 
not limited to a single PSD having a single origin of de- 
posit or domain. For example, while most users of a net- 
work metering system located in Shelton, Connecticut 

35 may be willing to deposit their mailpieces in the Post Of- 
fice in Shelton, Connecticut, other users may intend to 
deposit their mailpieces at different origins of deposit, 
such as Stamford, Connecticut. Furthermore, some of 
the users may be at a Client PC that is physically located 

40 in Stamford, Connecticut but is connected to a network 
server physically located in Shelton Connecticut. The 
present invention provides each user of a Client PC on 
the network with access to several PSDs having differ- 
ent origins of deposit. 

45 [001 8] Another benefit of the present invention is that 
mailpiece generation does not have to be interrupted 
because of PSD funds limitation. For example, when a 
large mail run requires more postal value than is stored 
on a single PSD, the user can access another PSD on 

50 the network to complete the mail run without having to 
interrupt the mail run to refill the PSD that is low on 
funds. 

[0019] The present invention provides a postage me- 
tering system that includes a plurality of computers op- 
55 eratively connected as part of a computer network and 
operating as client computers on the computer network. 
At least one postal security device (PSD) is coupled to 
at least one of the client computers (local client compu- 
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ter). The PSD includes unique identification and the abil- 
ity to store postal value and generate digital signatures. 
The client computers function as a postage nnetering 
network wherein a client computer other than the local 
client computer (remote client computer) requests evi- 
dence of postage payment from the PSD for concluding 
a postage metering transaction. The local client compu- 
ter functions as a meter server and the remote client 
computer functions as a meter client on the postage me- 
tering network. The remote client computer initiates a 
postage metering transaction in the PSD by sending a 
request for evidence of postage payment to the local cli- 
ent computer. The local client computer sends the re- 
quest for the evidence of postage payment to the PSD, 
receives transaction information from the PSD and 
sends the evidence of payment to the remote client com- 
puter for subsequent printing. 

[0020] The above and other objects and advantages 
of the present invention will be apparent upon consider- 
ation of the following detailed description, taken in con- 
junction with accompanying drawings, in which like ref- 
erence characters refer to like parts throughout, and in 
which: 

Fig. 1 is a block diagram of a preferred embodiment 
of a Network PC Metering System with PSDs couple 
to Client PCs in accordance with the preferred em- 
bodiment of the present invention; 
Fig. 2 (2A and 2B) are block diagrams of alternate 
embodiments of a Network PC Metering System 
with PSDs couple to Client PCs with a centralized 
transaction log; 

Fig. 3 is a block diagram of another alternate em- 
bodiment of a Network PC Metering System with 
the PSD coupled to a network server; 
Fig. 4 is a Client PC operating in stand-alone mode; 
Fig. 5 is a block diagram of the preferred embodi- 
ment of a Network PC Metering System of Fig. 1 
with a Client PC in Meter Server mode; and 
Fig. 6 is a flow chart of a Client PC accessing a re- 
mote PSD. 

[0021] In describing the present invention, reference 
is made to the drawings, wherein there is seen in Figs. 
1-3, three alternate embodiments of a Network PC Me- 
tering System. Fig. 1 shows the preferred embodiment 
of the present invention. A Network PC Metering Sys- 
tem, generally designated 10, includes a plurality (five 
are shown) of Client PCs 20 conventionally coupled to 
a Network Sender 30, Each PSD 40 (two are shown) of 
Network PC Metering System 10 is coupled to one of 
Client PCs 20. Each Client PC includes a conventional 
personal computer system with display, keyboard, and 
an unsecured printer 22. (Optionally, each Client PC 
may access a network printer 23 connected directly to 
the network.) Preferably, a plurality of PSDs exists in 
Network PC Metering System 10, with at least one PSD 
40 being coupled to several Client PCs 20. When a spe- 



cific PSD 40 is accessed for a metering transaction, Cli- 
ent PC 20, to which the PSD 40 is attached, becomes 
a Meter Server PC 21 (shown within parenthesis) for the 
remainder of the transaction. When the PSD 40 is being 
5 accessed by the Client PC 20 to which the PSD is cou- 
pled, the Client PC 20 is functioning as a stand-alone 
PC meter. An example of a stand-alone PC metering 
system is described in European Patent Publication No. 
EP-A-0780809, filed December 9, 1996. 
10 [0022] In the preferred embodiment, the postal funds 
accounting and the transaction processing occur in the 
Meter Server PC 21. It will be understood that this is a 
decentralized approach concerning funds accounting 
and transaction accounting because each Client PC 20 
15 having a PSD 40 attached thereto maintains accounting 
information (departmental accounting registers 42) and 
transaction information (transaction logs 44) relating to 
transactions occurring only at its PSD 40. 
[0023] Figs. 2A and 2B show altemate embodiments 
20 of the present invention. Network PC Metering System, 
generally designated 10', includes a plurality (five are 
shown) of Client PCs 20 conventionally coupled to a net- 
work server 30. Each PSD 40 (two are shown) of Net- 
work PC Metering System 1 0' is coupled to one of Client 
25 PCs 20. Each Client PC includes a conventional per- 
sonal computer system with display, keyboard, and an 
unsecured printer 22 (and/or optional network printer 
23). As in the preferred embodiment, a plurality of PSDs 
exists in Network PC Metering System 10', with at least 
30 one PSD 40 being coupled to several Client PCs 20. 
When the specific PSD is accessed for a metering trans- 
action, the Client PC 20, to which the PSD 40 is at- 
tached, becomes a Meter Server PC 21 for the remain- 
der of the transaction (Fig. 5). in this ^i^ibodiment the 
35 postal funds accounting occurs in Meter Sender PC 21 
when the transaction has been concluded. However, the 
transaction processing occurs at Network Server 30. It 
will be understood that this is a decentralized approach 
concerning funds accounting because each Client PC 
40 20 that has a PSD 40 attached thereto maintains ac- 
counting information (accounting registers 42) relating 
to transactions occurring only at its PSD. However, this 
embodiment provides a centralized approach concern- 
ing transaction accounting because one of the Meter 
45 Servers 21 (Fig. 2A) or Network Server 30 (Fig. 2B) 
maintains transaction information (transaction logs 44) 
relating to transactions occurring at any PSD. 
[0024] Fig. 3 shows a third embodiment of a Network 
PC Metering System, generally designated 10", in which 
so at least one PSD 40 is coupled to a Network Server 30 
and a plurality of Client PCs 20 are conventionally con- 
nected to the Network Server 30. Each Client PC in- 
cludes a conventional personal computer system with 
display, keyboard, and an unsecured printer 22 (and/or 
55 optional network printer 23). All accounting occurs in 
PSD 40 and transaction logs 44 are stored in Network 
Server 30. An example such an embodiment is de- 
scribed in European Patent Publication No.EP-A- 
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0780809, filed December 19, 1996. This embodiment 
comprises a Network Server 30 functioning as server 
for a conventional network, such as a local area net- 
work, and also functioning as Meter Server PC 21 with 
PSD 40 coupled thereto. Requests for indicia originate 
from and printing of indicia occurs at a Client PC 20. 
However, funds accounting and transaction processing 
occur at Network Server 30. It will be understood that 
the Client PCs 20 may be connected to Network Server 
30 by modem. It will further be understood that Network 
Server 30 may be located at a Data Center. It will be 
understood that this is a centralized approach concern- 
ing funds accounting and transaction accounting be- 
cause the PSD coupled to Network Server 30 maintains 
departmental accounting (accounting registers 42) and 
transaction information (transaction logs 44) relating to 
transactions occurring only in Network PC Metering 
System 10". 

[0025] Referring again to Figs. 1 and 2, Network PC 
Metering Systems 10 and 10' are configured with one 
or more PSDs 40 coupled to one or more Client PCs 20. 
In such configurations, the Client PC 20 becomes a 
Stand-alone PC Meter when a metering transaction is 
processed locally on its coupled PSD 40. When operat- 
ing as a Stand-alone PC Meter, such Client PC 20 per- 
forms the previously described metering transaction, 
acting as both the requesting Client PC and the Meter 
Server PC. As a Stand-alone PC Meter, Client PC 20 
can only access the PSD 40 coupled to it. There is no 
remote vault access when a Client PC is processing a 
metering transaction on the local PSD. 
[0026] Referring now to Fig. 4, a Client PC 20 is 
shown in Stand-alone PC Meter mode, generally desig- 
nated 100. Stand-alone PC Meter 100 includes Host PC 
102. PSD 104 and printer 106. Stand-alone PC Meter 
100 processes the functions for PSD registration, PSD 
refill, and postage dispensing as transactions for PSD 
1 04. Processing is performed locally by metering soft- 
ware component 110 (referred to herein as "PC Meter 
Toolkit") running in Host PC 102. In the preferred em- 
bodiment, PC Meter Toolkit is a Component Object Mod- 
el/Distributed Component object Model (COM/DCOM) 
object (typically implemented as a dynamic link library 
(DLL) or OLE control) with interfaces to perform meter- 
ing operations. One such interface maintains a list of lo- 
cal and remote PSDs on the network. This interface 
maintains a current list of all known and attached PSDs 
(the 'metertable') at the time it is instantiated. There is 
also a refresh method that Host and Client applications 
may use to update the list. An example of a PC metering 
system using a DLL with interfaces to perform metering 
operations is described in previously noted European 
Patent Publication No. EP-A-0780809, filed December 
19, 1996. 

[0027] This Toolkit implementation allows Meter Send- 
ers to be local or remote without any changes in the Cli- 
ent PC interface. The PC Meter Toolkit and Meter Server 
could be within the same computer, computers connect- 



ed via a local area network or the internet. Network pro- 
tocol negotiation is handled, for example, by the Win- 
dows operating system. For additional information on 
COM/DCOM see technical white papers for Microsoft 

5 Windows NT® Server, including: DCOM Architecture; 
DCOM Technical Overview; and DCOM The Distributed 
Component Object Model, A Business Overview. 
[0028] PC Meter Toolkit 110 includes the following 
components: a transaction handler, a vault interface, 

10 and a transaction log handler. Connections to the Data 
Center 5 (Figs. 1 and 2) can be made locally from the 
Stand-alone PC Meter 100 via modem 130. Accounting 
for debits and credits to the PSD are also performed lo- 
cally, logging the transactions on the hard drive of 

15 Stand-alone PC Meter 100. In this manner, the transac- 
tion processing and funds accounting are centralized on 
the Client PC operating as Stand-alone PC Meter 100. 
[0029] Stand-alone PC Meter 1 00 may accommodate 
more than one PSD per PC, for example, supporting one 

20 vault per serial port. Several Host or client applications 
programs 1 40, such as a word processor or an envelope 
designer, may access the PC Meter Toolkit 110 concur- 
rently 

[0030] The PC Meter Toolkit 110 provides standard 

25 metering functions, such as dispensing postage, PSD 
refills, and PSD registration. The PC Meter Toolkit 110 
resides in all Meter Servers and remote Client PCs ca- 
pable of printing postage. The user of Stand-alone PC 
Meter 100 can access local or remote PSDs using PC 

30 Meter Toolkit 110. The PC Meter Toolkit 110 provides a 
list of the available PSDs from which the user selects a 
desired PSD for a particular transaction. 
[0031] The COM/DCOM network concept provides 
mechanisms for a remote Client PC to gain access 

35 rights to the PC Meter Toolkit component in a PC Meter 
Server. Optionally, every Client PC can be given access 
rights to the PC Meter Server, whereby the PC Meter 
Server's PSD PIN (password) can be used to authorize 
access to postage functions in the PC Meter Server and 

40 Its PSD. By default, all PSDs are considered remotely 
accessible by all Client PCs unless configured different- 
ly by the user. Alternatively, the list of available PSDs 
can be customized based on user or system filters. For 
example, only sharing vaults whose origin zip matches 

45 the return address of the mailpiece. In the preferred em- 
bodiment, the PSD is not active during access for au- 
thorization because PIN validation is performed by the 
PC Meter Server. The PC Meter Server obtains the PSD 
PIN from the PSD to perform validation. In an alternate 

50 embodiment, the PIN validation could occur within the 
PSD. This is a secure process because the PIN is stored 
in the PSD. 

[0032] During the creation of a mailpiece, the user 
performs the following functions whether the PC meter 
5S is operated in stand-alone mode or network mode. The 
user can select CD-ROM addressing or dialup address- 
ing (at the Data Center 5) to obtain correct addressee 
information. The user can choose the class of mail serv- 
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ice (rate category) for the mailpiece. The user can select 
from a list of rate categories that are authorized by the 
Post Office. The user can view an indiciunn on the mon- 
itor while designing the mailpiece and print preview the 
mailpiece with an indicium image. PC Meter Toolkit 110 
provides a method to draw the indicium image and 2D 
bar code before printing. The indicium may be marked 
as visible or invisible for display purposes. See U.S. Pat- 
ent Application Serial No. 08/922875, entitled METHOD 
FOR PREVENTING FRAUDULENT PRINTING OF A 
POSTAGE INDICIUM DISPLAYED ON A PERSONAL 
COMPUTER filed September 3, 1997 and assigned to 
the assignee of the present invention, which discloses 
a method for preventing fraudulent printing of a postage 
indicium displayed on a personal computer. The user 
can change the postage amount, class of service and 
date of mailing. These changes are reflected in the ind- 
icium image. 

[0033] PC Meter Toolkit 1 1 0 provides postal funds se- 
curity because the user can not print an indicium without 
accounting for a debit to the PSD. Furthermore, there Is 
no direct access to the indicium image, except through 
the PC Meter Toolkit transactions. The PC Meter Toolkit 
uses atomic transactions to tie the debit to PSD with the 
enabling of printing of the indicium image. The atomic 
transaction ensures that the debit to the PSD is com- 
plete before printing the indicium. 
[0034] The transaction log stores funds transactions 
for PSD dispensing and refills. For Network PC Metering 
System 10, each Client PC stores the daily transaction 
log file for its local PSD(s). The user may select the local 
drive and directory path for the log file. For Network PC 
Metering System 10', each Client PC forwards transac- 
tion information for its local psD(s) to Network Server 
30 which stores the daily transaction log file. Once the 
accounting for a mailpiece transaction is completed, the 
client application requesting the transaction spools the 
mail piece corresponding to the transaction to the PC 
print manager for printing the indicium. 
[0035] Network PC Metering System (10 or 10') has 
many Client PC's with or without PSD(s) attached. Each 
Client PC has access to both its own local PSD(s) and 
remote PSDs in the network. Each Client PC can run its 
client application to dispense postage and initiate reg- 
istration and refills. 

[0036] As previously stated, Network PC Metering 
System (10 or 10') processes transactions for dispens- 
ing postage, PSD registration, and PSD refill on the Cli- 
ent PC 20 where the specific PSD 40 is located. This 
requires the transaction processing to be performed re- 
motely if the user is accessing a remote PSD. Modems 
for accessing Data Center 5 are preferably located on 
each Client PC 20 having a PSD 40 coupled thereto. 
However, a single modem may be located on the Net- 
work Server 30 instead of several modems on each Cli- 
ent PC 20 having a PSD 40 coupled thereto. In this man- 
ner, PSD registrations, and PSD refills are processed 
through Network Server 30. 



[0037] The software components for the Network PC 
Metering System (10 or 10') include the software com- 
ponents for the Stand-alone PC Meter along with two 
additional components, listed below. 
5 [0038] Referring now to Fig. 5, a Client PC 20 enters 
Meter Server PC 21 mode when another Client PC 20 
on the network initiates remote access of PSD 41 
through its PC Meter Toolkit 110. Meter Server PC 21 
processes the functions for PSD registration, PSD refill, 
10 and postage dispensing as transactions for PSD 41. 
Processing is performed at Meter Server PC 21 by the 
previously described PC Meter Toolkit 110 residing in 
Meter Server 21 and at Client PC 20 by the PC Meter 
Toolkit 110 residing in Client PC 20. 
15 [0039] Using a DCOM implementation, the PC Meter 
Toolkits 110 residing in the Client PC 20 and the Meter 
Server 21 operate in conjunction with each other such 
that the remote requesting Client PC 20 and Meter Send- 
er PC 21 operate collectively as a PC meter regardless 
20 of PSD/Toolkit location. The PC Meter Toolkit 1 1 0 resid- 
ing in Meter Server 21 handles messages from and to 
the requesting Client PC 20, and handles standard me- 
tering functions, such as dispensing postage, PSD re- 
fills, and PSD registration, for PSD 41 in the same man- 
25 ner as when in stand-alone mode. 

[0040] Referring now to Fig. 6, at step 200, Client PC 
20 sends a request through its PC Meter Toolkit 110 to 
remote PSD 41 for postal value for a mailpiece. At step 
205, Meter Server 21 determines whether the Client PC 
30 20 is authorized to make the request, if not authorized, 
then at 210. Meter Server 21 responds to Client PC 20 
that it is not authorized to access PSD 41 . If authorized, 
then at step 21 5, Meter Server 21 processes the request 
through its PC Meter Toolkit 110 sends the request to 
35 PSD 41 with information received from remote Client PC 
20. At step 220, PSD 41 dispenses the requested postal 
value including a digital signature based on the request. 
At step 225, PSD 41 sends the digital signature and 
transaction information to Meter Server 21 . At step 230. 
40 Meter Sen/er 21 through its PC Meter Toolkit 110 
records the transaction information in a transaction log 
on its hard drive. At step 235, Meter Server 21 sends 
the digital signature and at least some of the transaction 
information to remote Client PC 20. At step 240, Client 
45 PC 20 receives the digital signature and transaction in- 
formation and, at step 245, Client PC 20 generates an 
indicium bitmap and prints the indicium including digital 
signature on mailpiece. 

50 Networked Operations 

[0041 ] Microsoft's Windows 95^" and Windows NT"^" 
operating systems provide facilities through DCOM and 
other mechanisms to implement network communica- 
55 tions. Through the use of DCOM, objects can commu- 
nicate via a mechanism referred to as connection points, 
which can be used to implement direct communication, 
multi-casting (more than one client receives messages), 
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or broadcasting (all clients receive messages). This can 
be done between processes on the same computer or 
multiple computers on a network or on the internet. 
Mailslots is another Windows mechanism that permits 
the same communications facilities. The PC Meter 
Toolkit 110 uses these facilities to exchange information 
about the location and disposition of PSDs on the net- 
work. 

[0042] When a Client PC logs into the network, the 
PC Meter Toolkit 110 running on the Client PC registers 
the necessary connection points; one common to all PC 
Meter Toolkits on the network, and one specific to the 
Client PC itself. The common connection point is used 
to send and receive multi-casted messages from all Cli- 
ents. The specific connection point is for messages in- 
tended solely for one particular Client PC Meter Toolkit, 
such as a request or response for evidence of postage 
payment. 

[0043] Upon initialization, the Client PC's PC Meter 
Toolkit 110 uses the common connection point to send 
a message for all other PC Meter Toolkits to respond 
with available PSDs. PC Meter Toolkits running on PC 
Meter Sen/ers 21 then respond to the Client PC's spe- 
cific connection point with information about the location 
and identities of any attached PSDs. Referring to figure 
2A, the list of available PSDs is consolidated and pre- 
sented to applications that require postage metering 
functions. Referring to Figure 2B, the list of available 
PSDs is consolidated along with locally attached PSDs 
and the complete list presented to applications that re- 
quire postage metering functions. In this case, the PC 
Meter Toolkit 110 also sends messages to the common 
PC Meter Toolkit connection points indicating that an- 
other PSD is available for use by other PC Meter 
Toolkits. 

[0044] When a remote Client PC 20 selects a PSD 40 
to use, the PC Meter Toolkit 110 uses the information 
collected at initialization to know where the particular 
PSD is located, and how to communicate with it. 
[0045] In operation, the PC Meter Toolkit 110 also 
handles messages regarding the status of PC Meter 
Toolkits 110 on the network. Should new PC Meter 
Toolkits be started on other Client PCs 20, the local PC 
Meter Toolkit responds with information regarding any 
attached PSDs 40. Should messages be received indi- 
cating that a new PC Meter Client 20 has come on-line 
with its own PSD(s) 40, the PC Meter Toolkit updates its 
list of available PSDs. Similarly if a Client PC 20 is shut- 
ting down, messages are sent to all Client PCs indicat- 
ing that any local PSDs will no longer be available. It is 
noted that all messages between PC Meter Toolkits 110 
can be encrypted for added security 
[0046] The effect of the Client PC Startup and Shut- 
down multi-casts is that all Client PCs 20 dynamically 
know exactly which PSDs 40 are available. Clients also 
have the ability to ask explicitly for a refreshed list of 
available PSDs 40 since it is possible that a machine 
can go off-line without proper notification. DCOM also 



provides mechanisms for this with continual pinging to 
catch computers improperly notifying clients/servers. 

Centralized vs. Distributed Processing On the Network 

5 

[0047] A PC Metering system must account for funds 
for all mail pieces and refills. This requires saving trans- 
action records in a sequential transaction log file. Both 
postage dispensing and refills should be kept in the 

10 same sequential file such that meter discrepancies, 
such as discrepancies due to meter movement between 
Client PCs on the network, can be reconciled. The fol- 
lowing paragraphs summarize the impact of using cen- 
tralized vs. decentralized accounting for the transaction 

15 log on a network metering system. 

[0048] In a network metering configuration, if account- 
ing for funds is summarized by a user, transactions 
could be logged where the user is located. This would 
require consolidating log files only if the user has more 

20 than one PC at which transactions can be initiated, i.e., 
the user moves between PCs). This method uses de- 
centralized accounting, logging transactions on the us- 
er's PC. 

[0049] If accounting for funds is summarized by a me- 

25 ter, transactions should be logged where the meter, i.e. 
the PSD, is located. This would require consolidating log 
files only if the PSD could be attached to any PC {PSD 
moves between PCs). This method uses decentralized 
accounting, logging transactions on the PSD's PC. 

30 [0050] If accounting for funds is summarized by de- 
partment (i.e. departments have several users that can 
access several PSDs), transactions must be consolidat- 
ed if the logging of transactions was performed where 
the user is located or where the PSD is located. 

35 [0051] An alternative to such consolidation of log files 
from PCs is a centralized accounting and logging of all 
transactions on same PC or a centralized server Trans- 
actions would have to be sent to the Network Server PC 
for every mail piece, producing heavy network traffic. If 

40 the centralized server is down, or otherwise not availa- 
ble, then no postage dispensing or refills can occur, dis- 
abling metering capabilities over the entire network. A 
centralized server for Network PC Metering System is 
not the preferred embodiment of the present invention. 

45 [0052] Network PC Metering Systems 1 0 and 1 0' are 
representative of distributed processing of the metering 
transaction. Network PC Metering System 10 involves 
local transaction processing requested by a requesting 
Client PC 20, and remote accounting and logging at the 

so Meter Sen/er PC 21 , i.e., where the PSD 40 and trans- 
action log file 44 are located. Network PC Metering Sys- 
tem 10' involves local transaction processing by the re- 
questing Client PC 20, remote accounting at the Meter 
Server PC 21, i.e.. where the PSD 40 is located, and 

55 remote logging at the Network Server 30, i.e. where 
transaction log file 44 is located. Thus, the transaction 
processing is split from the accounting functionality in 
distributed processing. The steps of the transaction are 
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split between different PCs of the network. 
[0053] There is an advantage to configuring network 
metering for distributed processing, such as In Network 
PC Metering Systems 10 and 10'. If Network Server 30 
is down, metering transactions may still be performed 
when Client PCs having PSDs coupled thereto operate 
in stand-alone mode. Furthermore, network-metering 
transactions may be performed even when a Client PC 
20 with a PSD attached thereto is not logged on the net- 
work. For example, the Client PC not logged on the net- 
work can operate in stand-alone mode, and the Client 
PCs logged on the network can access other Client PCs 
having PSDs coupled thereto. 

[0054] When a Client PC is attempting to access re- 
mote PSDs on the network, an optional prioritized list of 
available PSDs can be displayed to the user for selec- 
tion. The prioritized ordering of the available PSDs may 
use the following heuristics: 

1 . PSDs sharing the same ZIP as the originating ad- 
dress of the mailpiece 

2. Local PSDs (same location as the Client PC) 

3. Remote PSDs sharing the same origin ZIP as the 
local PSDs 

4. PSDs having the same three digit ZIP as items 
1-3 

5. Remaining PSDs 

[0055] The preferred embodiment of the present in- 
vention has been described based on a Windows oper- 
ating system for the Client computers. It will be under- 
stood that the present invention is suitable for use with 
any computer operating system. It will further be under- 
stood that although the embodiments of the present in- 
vention are described as postage metering systems, the 
present invention is applicable to any value metering 
system that includes transaction evidencing, such as 
monetary transactions, item transactions and informa- 
tion transactions. 

[0056] While the present invention has been dis- 
closed and described with reference to the embodi- 
ments thereof, it will be apparent, as noted above, that 
variations and modifications may be made therein. It is, 
thus, intended in the following claims to cover each var- 
iation and modification that falls within the true spirit and 
scope of the present invention. 
[0057] Windows 95 and Windows NT are trademarks 
of Microsoft Corporation. 

Claims 

1 . A transaction evidencing system (10) comprising: 

a plurality of computers (20) operatively con- 
nected as part of a computer network and op- 
erating as client computers on the computer 
network; 



at least one security device (40) coupled to at 
least one of the client computers (20) (local cli- 
ent computer), said security device including 
unique identification, value storage means and 

5 digital signature means; 

means in said client computers (20) for func- 
tioning as a transaction evidencing network 
wherein a client computer (remote client com- 
puter) other than the local client computer re- 

10 quests and obtains transaction evidencing from 

the security device (40) for concluding a trans- 
action at the remote client computer. 

2. The system of claim 1 wherein the local client com- 
15 puter (20) is arranged to function as a transaction 
server and the remote client computer (20) func- 
tions as a transaction client on the transaction evi- 
dencing network. 

20 3. The system of claim 2 wherein the remote client 
computer is arranged to initiate transaction ac- 
counting in the security device (40) by sending a 
request for transaction evidencing to the local client 
computer, said local client computer is arranged to 

25 send the request for the transaction evidencing to 
the security device (40), and wherein said local cli- 
ent computer is arranged to receive transaction in- 
formation unique to the requested transaction evi- 
dencing, said transaction information including a 

30 digital signature, and wherein said local client com- 
puter is arranged to send at least the digital signa- 
ture to the remote client computer. 

4. The system of claim 1 , 2 or 3 wherein the local client 
35 is operable to send the transaction evidencing to the 

remote client computer for subsequent printing. 

5. The system of any one of claims 1 to 4 wherein the 
local client computer is operable to print the trans- 

40 action evidencing. 

6. The system of any one of claims 1 to 5 wherein the 
local client computer includes means for maintain- 
ing transaction information relating to transaction 

45 evidencing processed by the security device. 

7. The system of any one of claims 1 to 6 wherein the 
remote client computer is coupled to a printer (22), 
said remote client computer being operable to 

50 cause said printer (22) to print evidence of the trans- 
action, said evidence including the digital signature. 

8. The system of any one of claims 1 to 7 wherein the 
local client computer determines whether the re- 

55 mote client computer is authorized to request the 
transaction evidencing from the security device be- 
fore sending the request to the security device. 
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9. The system of any one ot claims 1 to 8 wherein the 
security device (40) is arranged to determine 
whether the remote client computer is authorized to 
request the transaction evidencing from the security 
device (40) before performing the transaction evi- 
dencing, 

10. The system of any one of claims 1 to 9 wherein the 
security device (40) is arranged to generate the dig- 
ital signature and to perform accounting for the 
transaction, said local client computer being ar- 
ranged to store transaction information received 
from the security device (40). 

11. The system of any one of the preceding claims 
wherein the security device is operable to generate 
the digital signature and to perform accounting for 
the transaction, said local client computer being ar- 
ranged to send transaction information received 
from the security device to a networl< sender for the 
computer network. 

12. The system of any one of the preceding claims 
wherein the transaction evidencing system is a 
postage metering system. 

13. A method for printing postage on a mailplece using 
a printer (22) coupled to a personal computer (20) 
(computer), the method comprising the steps of: 

connecting a plurality of computers (20) as part 
of a computer network (10); 
providing a postal security device (PSD) (40) 
coupled to at least one of said plurality of com- 
puters (20), wherein the other of said plurality 
of computers (20) are remote to the PSD, the 
PSD being a secure processor-based account- 
ing device that dispenses and accounts for 
postal value stored therein; 
sending (200) a request from the remote com- 
puter (20) to the local computer (20) for an 
amount of the postal value stored in the PSD, 
the request comprising postal information, in- 
cluding data representative of the amount of the 
postal value to be printed on a mailpiece by the 
remote computer, 

dispensing (220) the requested amount of post- 
al value by generating in the PSD (40) a digital 
signature representing the requested amount 
and accounting for the requested amount; 
sending (225) the digital signature and the 
transaction information from the PSD (40) to 
the local computer (20); 
sending (235) the digital signature and at least 
some of the transaction information from the lo- 
cal computer (20) to the remote computer (20) ; 
and 

printing (245) an indicium including the digital 



signature on the mailpiece. 

14. The method of claim 13, further comprising the 
steps of: 

5 verifying at the local computer that the remote 

computer is authorized to access the postal value 
stored in the PSD. 
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